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HostldMapping :: = SEQUENCE { 

hostName [1] IMPLICIT IASString, 

subjectID IMPLICIT IASString, 

proofOf IdPossession IdProof OPTIONAL } 

IdProof : : = SEQUENCE { 

secret OCTET STRING, 

encryptionAlgorithm OBJECT IDENTIFIER } 
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Version 
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Certif icateSerialNumber : := INTEGER 



Validity ::= SEQUENCE { 
notBef ore 
notAf ter 

Time : := CHOICE { 
utcTime 
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Time, 
Time } 
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:= BIT STRING 
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algorithm Algorithmldentif ier , 

subj ect PublicKey BIT STRING } 
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